★ Deployer linked within 3 hops to DPRK/Lazarus
dYdX v4 (dYdX Chain)'s assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CRITICAL FACTOR -- GREEN. No DPRK/Lazarus nexus confirmed to dYdX Labs team, Foundation officers, or v4-chain trust root. Comprehensive search across OFAC SDN list criteria and Chainalysis-class cluster patterns: zero adverse hits for Antonio Juliano, Eddie Zhang (dYdX Labs President), Charles d'Haussy (Foundation CEO), Joshua Watts (Foundation COO), Arthur Cheong, Rebecca Rettig, Markus Spillman (Foundation council), or identified genesis validators. The Feb-2026 npm/PyPI supply-chain attack has no confirmed DPRK/APT attribution as of 2026-05-17 per both Socket.dev and The Hacker News reporting. dYdX as a perps venue through which laundering may pass does not constitute team-level contamination (U4 protocol reframe from orchestrator). RD-F-125 red requires confirmed DPRK/OFAC nexus to the TEAM -- not present.
Sources #
- URLMalicious dYdX Packages Published to npm and PyPI After Main Account CompromiseSocket.dev attack analysis -- no APT attribution to DPRKretrieved 2026-05-17
- About dYdX Foundation: Shaping DeFi's FuturedYdX Foundation about -- named council members with no DPRK flagsretrieved 2026-05-17
- Antonio Juliano - People in crypto | IQ.wikiIQ.wiki Antonio Juliano -- no DPRK/Lazarus links in profileretrieved 2026-05-17
- Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT MalwareHacker News -- Feb 2026 npm/PyPI attack, no APT attribution statedretrieved 2026-05-17
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →